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Abstract- In this paper, the security of Selective Encryptionin 
RS A based Singular Cubic Curve with Automatic Variable Key 
(AVK) for some well known attacks are analysed. It is proved 
that this cryptosystem is more secure than Koyama scheme 
from which the algorithm has been generated. The proposed 
cryptographic algorithm makes justified use of Koyama 
Schemes. Koyama scheme is not semantically secure. The 
proposed Scheme is efficient and semantically secure public 
key cryptosystem based on Singular Cubic Curve with AVK. 
Further, the partially known attacks, linearly related plain text 
attacks, isomorphism attacks, low exponent attacks, Wiener's 
attack and Hastad's attack are analyzed for effect with the 
proposed scheme. The Selective Encryption in RSA based 
Singular Cubic Curve with AVK for text based documents is 
found to be robust enough to encounter all these attacks. 

Keywords- Singular Cubic Curves, Koyama Public Key 
Cryptosystem (PKC), Automatic Variable Key (AVK), Seman- 
tic Security. 

I. Introduction 

Standard RSA public key cryptosystem based on Singular 
Cubic Curve has given different variants as investigated by 
different researchers. Three public key cryptosystem were 
proposed by Koyama. These are called Koyama schemes. The 
concept of Singular Cubic Curve in Koyama scheme is in- 
troduced for the first time to deliver a public key 
cryptosystem. Singular Cubic Curve is a mathematical tool, 
which was first time used by Koyama for the construction of 
public key cryptosystem (PKC). The Singular Cubic Curve 
is an important concept in number theory because of its wide 
range of applications. The property of Singular Cubic Curve 
is helpful in cryptography as it forms an abelian group over 

finite field. In these schemes two plain texts are 0".v '">- ) are 
used to form a point M = (™ XP m y J on the Singular Cubic 
Curve Curve over ^V* and the cipher text is a point C = em 
on the same Curve. Singular Cubic Curve over the finite field 
and the ring *p is used. Here n is the product of two distinct 
odd primes greater than 3. 
A congruence equation of the form: 

y 2 + axy = x 2 + bx 2 mod p ( I ) 
where -i- t> «= z p may produce a number of solution. The set 

of all solutions <*,y) e f p x F P to (1), is called the solution 

space of the given singular cubic curve. 
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Later, Seng et al.[l] have shown that all three Koyama 
schemes are equivalent to each other by an proposed 
isomorphism and becomes insecure in the case of some known 
attacks like partially known attack [2] [3], linearly related plain 
text attack [4] [5] isomorphism attack [4], homomorphism attack 
[6], Wiener's attack [7], and Hastad's attack [7]. Some other 
security notions are non-malleability [8] and Plain text- 
Awareness [8]. Non- malleability implies that any attacker 
cannot modify a cipher text while keeping any control over the 
relation between the resulting plain text and original one. The 
Plaintext- Awareness ensures that no one can produce a valid 
cipher text without knowing the corresponding Plain text. There 
are a number of mathematically induced attacks on RSA based 
cryptosy stems. 

These are classified into three categories: 

• Attacks exploiting the polynomial structure of RSA. 

• Attacks based on its homomorphism nature. 

• Attacks due to a bad choice of parameters employed in RSA. 

There are few attacks on RSA which do not require to 
factor the modulus. Such attacks are sometimes possible when 
the cipher texts and some additional information are known, 
for example, 

• When some parts of the plain text is also known, 

• The encryption of the same or related plain text is 
sent to different users (e.g. in a broadcast 
application) or 

• When the encryptions of two related plain texts are 
sent to the same user. This cryptosystem is most 
commonly used for providing privacy and ensuring 
authenticity of data. 

The efficiency and security [8] are two key factors of 
any cryptosystem. The cryptosystem proposed by Koyama is 
not semantically secure [3]. The cipher text should not leave 
any useful information about the plain text in an ideal situation. 
The cryptosystem proposed by Koyama is two times faster than 
that of standard RSA [7] scheme. But it is also not secure against 
partially known plain text attack, linearly related plain text attack, 
isomorphism attack, homomorphism attack and These attacks 
are not possible in Singular Cubic Curve based RSA with AVK 
technique. This scheme is claimed to be semantically secure 
and also prevents those attacks which are prevalent in Koyama' s 
scheme. The rest of this paper is organized as follows: 

Section 2 presents the related work in this field. Sec- 
tion 3 describes some known attacks and their proposed 
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solution in an elaborate manner proving the proposed scheme 
as semantically secure. Section 4 further probes into other kinds 
of attacks that may happen in such scheme. This section is ac- 
tually paving the way for future research for finding solution of 
other attacks. Countermeasures are suggested in Section 5. Ef- 
ficiency and security analysis of the suggested solutions are the 
points of concern in Section 6. Section 7 concludes the paper 
with a future direction of work. 

II. Related work 

Singular Cubic Curve RSA with Automatic Variant Key 
(AVK) scheme is based on selective encryption with automatic 
time variant key (AVK). Selective encryption [9] provides a 
number of advantages in secured communication process. In 
the selective encryption, only a random part (r) of whole 
message/plain text is encrypted. Let the selected text be 
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Figure. 1: Selective RSA based Singular cubic curve 
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column wise. Here \ [ j ji and ; \ j 

and i ■■= i. wiiete n and m is linked with the block size and key size 
respectively (n =£ m) The number of blocks that can be 
obtained from [rr:|, will depend on the family of encryption 
algorithm. The encryption technique may prevent a key 
size going beyond a threshold value and such conditional 
implication can be obtained by right choice of m. if 
m = | [ijj]| then it is one time pad in effect. Rest of the text 
=M — [i"ij]i« the remaining text alter selection. Message^ 
can he presented in matrix format M = jtiij: |.R = \^\i\^ a 

ma t ri x, so M — [ r j : | i s a va 1 i d ma t ri x. Therefore, ma t ri x 
manipulation can be applied for any cryptographic exploi- 
tation as as per valid matrix operation. To construct such a 
scheme, random part of plain text is chosen for encryption/ 
decryption. By applying AVK in this selective text, the de- 
sired result is achieved. The key has been automated by de- 
sign to get changed in every session. The scheme proposed 
is a generalization of the Koyama scheme. The paper con- 
tributes towards the robustness by applying Time Variant 
key [6] or Automatic Variant Key (AVK) . The concepts of 
AVK [12] [13] is illustrated in [17]. Following basic opera- 
tions are used in the proposed PKC. 

A. Proposed Generalization of Koyama Scheme-II using 
AVK with application of Selective Encryption 

The algorithm demands the implementation of the steps 
of key generation, encryption and decryption. The steps can 
be elaborated as follows: 
• Select a part [r fl ] from M. 



1 ) Select large prime number n.qp, q. 






2 ) n-p * q 








3) N= lcm(p-Ui-l) 
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The secret key (p, q^ d p , d q 


) is generated. 






Key generation process 


allows the sender and receiver 


to use the kev for further communication. 






Step 2: Encryption: Plain 


text (m x ,m y ) 


and public key 


(eji). 









c= Q) modn 

a = I I mod n 

V m,niy / 



(4) 



(5) 



Sender sends (cja) to the receiver as the cipher text. 
Step 3: Decryption: The shadow cipher text_J^a) with 
secret key (p, q, d p , d q ) is received by receiver. 



R = [Yij]. where [ = bit position row wise, j = bit position C p = c mod p 



m p = c p p mod p 



C q = c mod q 



(6) 

O) 

(8) 

m q = c q d( i mod q (9) 

Receiver computes, fm x , m y ) and fm x ,m y J using. 
C p (a,Q), a p = a mod p (10) 

C q (a, 0), a q = a mod q (11) 

Using isomorphic mapping, following can be obtained 



dp nip 

m Y „ = — — 72 mod p 



(m p -l) 



dp nip 

m v „ =-r t — 73 mod p 



y P (mp-l) 3 



m Y = 



_ aq m q 



^ (m q -l)< 



m v = 



d q mq 



mod q 



mod q 



*l (m q -l) 3 
Finally resolving the equations (12)-(15) 



(12) 
(13) 

(14) 

(15) 



( m Xp - m y p ) eC p( a P'°) ( 16 ) 

a p — amodp (17) 

(m Xq ,m yq ) Z C^.O) (18) 

a q = a mod q (19) 

By application of Chinese Remainder Theorem [14] on 

following equations: 

(»%.'%„) eC p (a r ,u) (20) 

(m Xi! ,m y ^) e C q (a q ,0) (21) 
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Resolving (m x , m y ) <= (a, 0). 

Encryption has been applied on selected part of the text 
message M only and therefore named as selective encryption 
technique. Decryption has been applied on selected part using 
the similar algorithm by the receiver. Finally, the full text 
document can be constructed by merging the decrypted 
selected part of m namely [r Lj J 
with the remaining part of the message. 
Thus 

[r r; ] + (M-[r 4/ ]) = M (22) 

Can be obtained. 

III. SOME KNOWN ATTACKS AND THEIR 
PROPOSED SOLUTIONS 

A.. Partially known plain text attack and its solution: 

In the Koyama scheme, knowing one ordinate m x prjtny in 
a plain text p air (m^m^) one can compute the whole plain 
text with the help of corresponding cipher text. Let n, e be a 
public key and C = [c x/ c y )be the enciyptionjof the plain 
text M = (m^my), i.e. e ® ^m xl m y ^ = (c x ,Cy) Assume 
that m x is known and m y is unknown. Let m y = y. Then^ 



§iUMll£L^}^i9.^Q^nj^ For the Koyama scheme, by 
induction technique, it can be shown that for any k inZ ri . 
k®(m x , v) = (u k , v k y) where u k and v k are two positive 
integers. Finally, for k = e. the relation (u & v e y) =(Fx* c y\ 
which can be solved for y = CyVg 1 (wodri) if ve ± 
(mod n). However, if v^ = (mod n) then the cipher text 
C is a point of order 2 in CJQ, h) which means that d® C = 
M , i.e. C = M 3 hence M is always computable. In case of 
Selective Encryption in Cubic Curve RSA with AVK: Let 
the selected part of document be equal to complete part. 
(u e , v e y) =_{c xl c y ), Comparing both sides v e y = 

c v => 

y = c y v> e 1 (mod n) 

if v e (mod n), and if is known (c xr c y ) = c, d — " c = 
M (original plain text) If attacker hacks this data, and wants 
to decrypt the data due to AVK, the attacker can not find the 
decrypted key applied over the text iteratively even if he/ 
she is successful in getting hold of immediate key that gets 
changed in the next iteration, Hence this attack cannot be 
successful. 

B. Security against Linearly related plain text attack: 

Koyama scheme is insecure if two linearly related plain texts 
are encrypted with same public key. This attack is explained 
as follows: Let M =(rn. xl m.y) andM'= (m' AJ m' v ) 
be two plain texts linearly related by the known relations: 



(m'^m' )be two plain texts 


lineaily 


related by the known 


relations : 






m! x =omfi x + y 




(?3) 


w!y = fim x S 




(24) 



whereto; $ y and 5 are integers in Z* . Assume that the 

encryption of the plain texts (m^m v ) and {m! Xf m* ^) are 

given by: 

[c xt c^\ = e ® (m Xf m x ^) (jnodn} (25) 
fc'^cV) = e® fc^Cv) (modn) (26) 
From the above cipher text it can be derived the curves 

C^O, fr)andC^(0, b) up on which the point must lie. Thus 

it is derived. 



m| + bm^ — m% = (mod n) 



(27) 



(am x -\- y) 3 + b f (ccm x + y~) 2 — (fim v + y) = (mod n) 

(28) 
from last two equations ni- can be derived as a polynomial 
u in m x with w (x) = (am x + 7) 3 + b ' (am x + y) 2 fl 2 

2fia 

(29) 

By using the addition formula on Singular Cubic Curve, 
it is clear that w(m^ mJmod n\ Now r let fix) = x 2 + 
hx 2 — w(x) 2 (modn) 

(30) 
wJtu£h is a polynomial of decree 6. Thus 
f (mj = (mod n) q& Z y / (n, f y ) (3 1 ) 

N ext, e (x) (x, w (x) ) = (h (x)J(x)) (mo dn) is c oniput ed 
over Z\x] Kjif (x)) . Then the following equations are 
obtained: 

h(m y ) = c y (mo d ri) (3 2) 

/ (m. y ) = c v (mo d n) (3 2) 

F ina lly ; gcd(h( x) - ex, f (x) ) is c o mput ed whi c h is a 
linear Singular polynomial of the form k(x-mx). This gives 
the plain text text basedm A . . After knowing the half of the 
plain text (rn XM my) = M^ the other half m v can be 
computed by w(m^) = m y . Again by the linear relation 
between M and M 1 , the plain text M' can be computed. In 
order to apply such type of attack, the knowledge of 
parameter b (or ajis necessary. 
Selecth-e Encryption in Singular Cubic CuireRSA with AVK: 

The relationship does not hold good and therefore 
decryption or finding the key at a particular stage (though 
being linearly dependent texts) is not possible as the 
iterative stages may not be the same due to different 
plaintext, 

C. Security Security- a gainst Isomorphic attack 

The idea behind this type of attack is based on the iso- 
morphic property of two Singular Cubic Curves. Such type of 
attack was first time identified by Koyama for the KMOV 
scheme [6]. The isomorphic property may be described by 
using the following theorem. 

Theorem: Let n = pq (p, q are primes), and c n (Q. b t )and 
c n (0.b 2 )be Singular- Cubic Curves such that, 
c. n (0.jfr 2 )be Singular Cubic Curves such that. 
C^O, b{):f =x>+b l x\mod n), (34) 

C^0, b 2 ): f = xt+b&Xmod n). (35) 

C^0, b\) and C^(0., b 2 ) are isomorphic if there exist u p e 



Z^and u^e Z^such that. 



b 2 = u h (mod p\ and h 2 =u h (mod q) 



By using the property of Singular elliptic curve over field 
and Chinese Remainder Theorem, the following isomor- 
phic property of Singular Cubic Curve over ring is shown 
[15] as follows: 
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C#, h) : f = A 3 +h.v-(mod n) (36) 

and Cn(0, bi): f = x 3 +fex 2 (mod n) (37) 

Let Mi = (wii^ fff ly ) 3 Ci = (c u c ly ) e C^(0 ; ij) and M 2 = 
(/»2x 9 ^2y) 3 Q2 = (c 2 r. C2 y ) e CJO, b 2 \ where Cj = e®M t over 
C^(0 ; ft t ) and C 2 = e®M 2 over C^(0 ; b 2 ). 

Then the following statements are considered equivalent, 
i. QJP, b\) and C^(0, b 2 ) are isomorphic 
ii. b 2 = M 2 5i(mod n) for some weZ^ 
iii. c 2x = w 2 Ci x (mod «) 5 c 2j = w 3 c ly (iiiod n) for some 

iv. »i2x = M^uOnod ri) 7 m 2y = w 3 m lv (mod n) for some 

IfC 1; C 2 and M 1 satisfying the congmence (3) are given, 

then M 2 can be easily obtained by computing the congru- 
ence (4). It is not difficult to check whether congruence 
(2) holds. Suppose, an attacker A wants to victimize B by 

forging signature on a plain text M 

=[m Xf TOy J without rJ 7 s consent. Tor this, A generates 

another message M' with B's public key n B and random 

integer u: 

M' = (w 2 m. Y mod m, u 3 m y mod m), 

and sends M' to B. B makes a signature S' = (s/, §/) for 
M' with his secret key d B : 

S' = ^M'overC^0 3 |^ 

Then, A computes the signature. 

5 = (sx, s^r) = (ir 2 s ; /mod ng, u^s/ mod he). (38) 

Which is B's signature for the message M. It maybe noted 
that the curve C YlB (§ l J} B ) contains points (M, S) and the 
curve C nB (0 ? b' B )contains points (Af f ,5'). Using this 
technique, A can forge B's signatures without B's secret 
key. 

Selective Encryption in Singular Cubic Curve RSA with AVK: 
allows M' to be sent to receiver B. B makes a signature S 
= (§x, ^v) for M' with his secret key d B This d B is not 
original d B , in which AVK function has been applied and 
the function is represented as AVK (d B ).B will calculate the 
signature as follows: 

S = AVK (d B ). M over C n (0, h B ) (39) 

The attacker can not find the secret key of B in this com- 
putation. Hence Isomorphic attack is not possible in case of 
selective encryption with AVK. 

D. Security Security against Homorphic attack 

This attack originated from homomorphic propert 
(k®[P + Q] = k®[P] k®[Q]), Some known attacks of 
this typ come under homomorphic attacks. Using 
homomorphic property such as common modulus attack, 
chosen message attack, garbage man-in-the-middle attack, 
the Koyama schemes 



E. Common Modulo attack 

If a message M is sent to two users who have co -prime 
public encryption keys (say e 1 and e 2 ^ then the message M 
can be recovered by way of computation. Let the cipher text 
corresponding to the plain text M are C^, = 

M ei (mod n)and C 2 = M e2 (mod n)a, then by extended 
Euclidean algorithm, attacker C can compute u and v such 
that ue x + ve 2 = 1. and he can easily get the plain text M 
by computing CJfCJii = M, e x u + e 2 v (mpd n) = M This 
attack is called common modlus attack. 
[Input] Two cipher textsCji = (C Xl , C yi ) X. 2 = 

(C X2j C yr .)common modulus n, and encryption keys 

ei,e 2 . 

[Stepl] By extended Euclidean algorithm Carol computes u 
and v such that e x u + e 2 v = 1 
[Step2] Attacker C computes, 

= (wx^+vxe 2 )®(//^/^) 

[Output] The intended plaintext pajr^(m x , ni y ). 

In Selective Encryption in Singular Cubic Curve RSA with 

AVK, AVK functionhas been applied after encryption. So, 

ux (c XiJ c yi ) + vx (c X2J c y J 

= (u X AVK(ei + v X AVK(e 2 )) 
it cannot be found out e lr e 2 from the equation without 
having further information one 1: and e 2 Hence, this attack 
is not possible if this algorithm is used for cryptography. 

F. Chosen Message attack 

Chosen Message Attack is possible in Koyama 
schemes Suppose an attacker C wants to get the signature 
of a sender A on the message pair (m x , m y ) Then he 
proceeds as follows: 
[Input] Ajnaej$s^ 
plaintext. 

[Stepl] First Carol chooses relatively prime to and 
computes and such that ev + ku = 1 . 
[Step2] Carol computes M ! = k©(m^ m v ) = (rrr^ 3 jri^). 
[Step3] Next, she ask Alice to sign on the document M J = 
(rrr x . m\.) and sets the signature S ? = d©(rrr x , m\.) = 

[Step4] Consequently Carol can compute the signature S of 
Mby, 

S = {u®( s^, s^)} © {v®(rn^ m Y )} 

^(uxdxk)®^ m ¥ )> © (v®( m^ m v )} 

= dx(uk+ev) ® ( m Xl m v ) 

[Output] The signature S ofJML 

In Singular Cubic Curve RSA with AVK. w r hen attacker 
sends 

Message (m' XJ m y ) to the sender for knowing the secret 
key, 
the attacker gets the signature S' = d X (m' XJ m' v ) = 

(Sx,S'y). 

After signing by the sender, then sender will apply the 
funct ion of AVK a s f 1 1 ws : 



(40) 



S"= AVK (d X (m' XJ m r y )) 



So, attacker can not compute the signature as the function 
AVK is not giving predictable output in a single step. 
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s = u X {s' x s f y) + v x (m x> m v )= uX k xAVK(dX 
[m Xr Wy))+vX \m Xt Wyj AVK function has been applied 
therefore the equation {{uk + ev) = 1) fails to yield the 
desired output and (sx> jjvj could not be obtained. Thus this 
type of attack is not possible if the proposed algorithm is 
applied [17]. 

G Garbage Man-in-ihe-middle attack attack 

This attack is possible in Koyama scheme. The attacker 
wants to get the plain text M from a given cipher text C = 
[c Kf c v ) in the Koyama scheme. The attacker can get^ori^ml 
plaintext as follows: 
[Input] A message pair(c x , c v ), n , e . 

L -L J .1 \_ 

[Stepl] First Carol inspects C = e2(m^ m v ) = (c^, c v ). 
[Step2] C'= (c' c\) = kSfe, c v ) = kxe®( nu, m v ) for any 

L X J ^www waw w- "-wot-- ' • ■ vwwV ' • * 

chosen k relatively prime to e. 

[Step3] By Extended Euclidean Algorithm, Attacker C can 

compute u, v eZ n such that kuH- ev = 1. 

[Step4] She ask Alice to sign on (c^ c^) and gets 

S J =(s' s%) = d®(c' c\) = dxkxe®( m N7 m v ) = k®( m x , 

m v ) 
[Step5] No w, Attacker C can compute the original Message 
as, 

u®(s^,s^©v®(c^ c v ) = uxk®( m, m,.) © exv®( 

m^ m v ) = (m^ m v ). 
[Output] The intended plaintext (m x . m v ). 

L J. J X. 

Bur in Singular Cubic Curve RSA with AVK, at the time of 

signature, S = (s' Xj s' y ) = dx (c' x ,c' y ) = dx k X 

AVKfe X (m x ,m y )J. Then, attacker can compute the 

original message as 
u x (s' x s' y ) + v x (c Kt Cy) = dx(c x c y ) + v x (c x ,c y ) 

=d X k X AVK fe X (m x , m y )J + v X (c x , c y ) 

=u X k X AVK(m x ,m y ) + e X v X (m - x, m y ) 

By this equation, it is clear that plain text can not be identified 

as it is the functional output of AVK. Output is not confined 

in a stepwise manner and very much dependent on data and, 

therefore the attack is ineffective in the proposed algorithm 

of proposed approach in this paper. 

IV. SOME OTHER KNOWN ATTACKS 

A. Wiener 's attack 

To reduce decryption time, one may wish to use a small 
value of d rather than a random d. Since modular 
exponentiation takes time linear in log 2 d , a small d can 
improve time reduction or increase in speed to a great extent. 
Wiener[7] shows that a small d results in a total break of the 
cryptosystem. General description of Wiener's attack as 
follows: 



Theorem: Let N =^>g with q < p < 2q* Let d<l/3itf *■ 

Given N.e with ed=l mod0(A/1,Marvin can efficiently 
recover d. 

This can be proved as: Since ed=l mod0(/Vl. there 

MT WWW * * " 

exists a k such that ed-k0(j\ r ) = 1. Therefore, 



Hence 



e k 



d0'» 



(41) 



■V 



d4 2d 



This is a classic approximation relation. The number of 
fraction - with d<N approximation - so closely is bounded 
by hgnTi . Since ed-k0(AT)=l. therefore. scd(k.d=l). and 
hence - is a reduced fraction. This is a linear time 

d 

algorithm for recovering the secret kev d. But in linear time 
algorithm for recovering the secret kev d. But in case of 
singular cubic curve RSA : the concept of AVK has been 
applied. At receiver side following holds good: 
d p =e~ 1 7nod(p-l) (42) 

d q = e~ 1 mod(q-l) (43) 

Before decryption, AVK is required to be applied again 
and : calculation of AVK is not possible for attacker due to 
change of key in every session. So this attack is totally 
avoided in this proposed extension of Kovama scheme 
[17]. 

B. Hasiad's attack 

The Koyama scheme is very much vulnerable to 
Hast ad's attack. Let. Kovama' s Singular Cubic Curve 
equation be: 

J WW 

y 2 + ax = x 2 (m.odn) 
where the plain text is a parr (m„,77i v )and a is chosen such 

.••■aw j- j- v "■ y / 

that the equation with x = m x and y = m v is satisfied. An 
attack is possible when one half of the plain text can be 
fou^jvhen the other half is known [16]. From equation 
plain text can also be recovered when at most 1/6 of 
m x andm v is unknown. When 6 linearly related messages 
are known then a Hastad attack is possible making Koyanra 
Scheme vulnerable enough. 

But in case Singular Cubic Curve RSA with AVK : the 
linear relation between the consecutive plaintext and cipher 
text is not established due to change of key in every 
session. Moreover, the unencrypted plaintext and 
selectively encrypted cipher t^O^are combined together 
making it impossible to detect the linearity between the 
said texts of the document chosen. 
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V. COUNTER MEASURES AND DISCUSSION ON 
THEORETICAL SIMULATION 

Randomized key concept is applied in AVK in plain text 
after encryption and at the time before decryption by the 
receivers should not be chosen too small, since a small 
would give yet other small modular equations over the plain 
text that can be combined withmf. + b = mj {mod ri) for 
even more effective attacks. Since the degree of the equations 
resulting from division polynomials is e 2 it is suggested to 
choose e at least 16 bits long. These propositions require, a 
careful analysis in a case to case basis depending upon the 
Cipher Suite's requirement. 

VI. EFFICIENCY AND SECURITY ANALYSIS 

In the scheme given by Koyama, e th power of mj/mj under 
modulo n is computed during the encryption process. In case 
of proposed extension of Koyama scheme as presented by Singh 
and Samaddar [17] algorithm, selective encryption has been 
applied, then AVK has been used for security purpose. This 
feature increases the efficiency of encryption. But, the decryption 
is approximately of similar efficiency of the schemes given by 
Koyama. 

From Koyama's analysis, let x and y the coordinates of 2 
log n-bit plain text be transformed to a log n-bit plain text by 
isomorphic mapping. This message of log n bit length is then 
encrypted by using encryption process. The obtained cipher 
text is decrypted by using decryption key over which is n 
the transformed message. By using the inverse transformation, 
the origional 2 log n bit length message is obtained. But from 
the analysis of Koyama schemes, a number of attacks are 
permissible like Partial known plain text, Linear related plain 
text attack, Isomorphic attack, Homomorphic attack (Common 
modulo attack, common modulo attack, Garbage Man-in-the - 
middle attack ), Wiener's attack and Hastad's attack. This proves 
that Koyama scheme is not semantically secure enough and 
therefore require enhancement in terms of robustness that has 
been pointed out here by the introduction of AVK. In case of 
Selective encryption Singular Cubic Curve RSA with AVK, 
these attacks are not possible. This algorithm is also proved to 
be semantically secure due to use of AVK concepts. The 
proposed system has already been substantiated [17]. The results 
obtained in this paper on the basis of theoretical simulation and 
analysis can be substantiated further by computational 
simulation. This has been taken up for application oriented study 
in future course of research. Due the page limitation the 
concerned graph of simulation results could not be produced 
here that echo the theoretical implications obtained in this paper. 

VII. CONCLUSION AND FUTURE WORK TO BE 
UNDERTAKEN 

The robustness of the algorithm [17] over the extension of 
Koyama Scheme with selective encryption in RSA Singular 
Cubic Curve with AVK is considered here. The algorithm 
proposed by Singh and Samaddar [17] is investigated from 
different angles to come to the conclusion that a number of 
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known attacks are not possible due to the design of the algorithm. 
Application oriented simulation may be taken up to establish 
the results beyond any doubt. A future direction of work in this 
area is to develop a generic algorithm which will be equally 
applicable to text based as well as image based documents. 
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